diff --git a/thrift.spec b/thrift.spec
index 9e8ff0e3b81d28fa7a2511cb1db3abe514b01f6e..e5aba6bec45080f2729e7c8e21bb468286aa4049 100644
--- a/thrift.spec
+++ b/thrift.spec
@@ -38,7 +38,7 @@
 %global lua_configure --without-lua
 Name:                thrift
 Version:             0.14.0
-Release:             3
+Release:             4
 Summary:             Software framework for cross-language services development
 License:             ASL 2.0 and BSD and zlib and MIT
 URL:                 https://thrift.apache.org/
@@ -299,6 +299,9 @@ cp libthrift_dir/pom.xml %{buildroot}%{_datadir}/maven-poms/libthrift/libthrift.
 %endif
 
 %changelog
+* Mon Dec 20 2021 wangkai <wangkai385@huawei.com> - 0.14.0-4
+- This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.
+
 * Wed Dec 8 2021 baizhonggui <baizhonggui@huawei.com> - 0.14.0-3
 - fix java compile fail